frack113 83dee26262 Update net_pua_cryptocoin_mining_xmr.yml

2021-11-20 19:20:07 +01:00

..

cisco/aaa

Second round

2020-09-15 07:02:30 -06:00

zeek

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

net_apt_equationgroup_c2.yml

add tag mitre t1041 for equation group c2

2021-11-20 16:23:27 +01:00

net_dns_c2_detection.yml

Second round

2020-09-15 07:02:30 -06:00

net_firewall_high_dns_bytes_out.yml

split global net_high_dns_bytes_out.yml

2021-09-21 19:53:25 +02:00

net_firewall_high_dns_requests_rate.yml

split global net_high_dns_requests_rate.yml

2021-09-21 19:51:11 +02:00

net_high_dns_bytes_out.yml

split global net_high_dns_bytes_out.yml

2021-09-21 19:53:25 +02:00

net_high_dns_requests_rate.yml

split global net_high_dns_requests_rate.yml

2021-09-21 19:51:11 +02:00

net_high_null_records_requests_rate.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_txt_records_requests_rate.yml

Second round

2020-09-15 07:02:30 -06:00

net_mal_dns_cobaltstrike.yml

CobaltStrike DNS rules

2021-11-09 17:29:43 +01:00

net_pua_cryptocoin_mining_xmr.yml

Update net_pua_cryptocoin_mining_xmr.yml

2021-11-20 19:20:07 +01:00

net_susp_dns_b64_queries.yml

Split PR 1802 fix net rules

2021-08-09 17:23:15 +02:00

net_susp_dns_txt_exec_strings.yml

Update net_susp_dns_txt_exec_strings.yml

2020-10-15 23:11:16 -03:00

net_susp_network_scan_by_ip.yml

split global net_susp_network_scan.yml

2021-09-21 19:47:28 +02:00

net_susp_network_scan_by_port.yml

split global net_susp_network_scan.yml

2021-09-21 19:47:28 +02:00

net_susp_telegram_api.yml

Split PR 1802 fix net rules

2021-08-09 17:23:15 +02:00

net_wannacry_killswitch_domain.yml

fix: duplicate ID

2020-12-13 18:59:04 +01:00